Comment by TeMPOraL

Oh right, I started to notice it too - couple non-tech people around me seem to treat "password reset" as default login flow, and definitely don't complain as much about auth flows as the rest.

I guess that's one effective way to cope with security industry bullshit.